$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: 3tbC2OLkLaFcAa6Sy3gCKvNYFoRmuV26kZT6zIz3jkU= Subject key identifier: 6C:F0:ED:82:BE:A7:8F:D2:6A:C4:85:4D:FE:91:30:78:FE:4C:2B:C4 Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: 01D3 Signing time: Mon 11 Aug 2025 02:54:21 +0000 Manifest this update: Mon 11 Aug 2025 02:54:20 +0000 Manifest next update: Mon 18 Aug 2025 02:54:20 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: k5uM0ijqUCX53TUfJXn6h/oaZbGkLpfQJ3IPtii9uLE=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: r2GEMiOfnscgdpCkR3elgdL+OdlduqhLjKNmAhLGMa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431, serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: Aug 11 02:54:20 2025 GMT Not After : Aug 18 02:54:20 2025 GMT Subject: CN=68995b5c-17eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:4e:45:a4:6a:4c:dd:f2:ae:6c:33:a6:e6: 6f:b1:73:17:f5:66:49:91:20:08:13:58:d3:14:82: 74:24:0d:1c:ba:03:29:4e:96:76:9a:c1:41:7f:df: ec:9f:cf:9e:22:fd:c3:3a:dd:41:f9:e4:c2:41:6e: 64:cd:0c:6e:00:b8:b6:8a:2f:a6:35:b6:40:15:83: ee:2a:75:27:aa:b8:91:f6:87:e9:08:d0:7a:d5:ab: b1:f9:09:d3:90:c2:7d:18:ac:78:a0:f0:f4:2d:4e: 6e:86:82:db:c0:bf:18:c3:3a:e5:08:1e:9e:72:45: 5f:3a:f1:d5:30:85:0c:2c:64:20:01:e9:f0:c0:53: b4:03:39:1a:a4:55:6f:50:df:87:13:4d:9a:c7:d0: 5c:5e:e4:a8:45:6f:05:d6:5a:d5:4a:4c:fa:a2:fa: d8:d5:93:0e:f2:41:cb:c3:c8:dc:9d:bc:74:44:7f: ee:b0:a6:4b:bf:3d:50:2b:3c:3f:ed:ff:65:e0:d2: 8e:18:14:9f:e0:82:7a:33:c3:ac:cc:66:9c:ee:7e: c8:94:50:66:2b:79:0f:66:98:51:e4:60:c8:ab:49: 1b:90:92:32:4d:b3:e4:fc:0f:f7:00:3e:69:63:72: d5:e2:78:b3:3c:da:58:a4:b3:d7:dd:6d:43:52:8f: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:ED:82:BE:A7:8F:D2:6A:C4:85:4D:FE:91:30:78:FE:4C:2B:C4 X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:42:9a:2b:4e:0c:a3:85:58:22:08:58:3c:7f:37:2d:b1:1e: 73:29:37:89:b0:7f:e0:ee:38:ef:8a:a3:cf:6d:5f:57:36:3f: fd:3f:36:f2:64:b2:27:c6:3f:c2:7f:9a:09:f7:85:23:07:27: 94:6c:29:86:89:fe:69:f8:98:9a:bc:2d:a3:39:9a:fd:db:a2: 08:c8:83:c1:c6:8d:6b:44:e6:e2:ad:dd:b2:be:3a:e5:d9:37: da:3f:47:91:07:a6:78:42:ff:91:94:97:c4:7d:e5:87:1b:34: 3b:c7:c9:3d:54:42:5c:08:19:0a:38:95:00:c6:25:eb:a2:38: 9c:66:99:64:0e:30:54:81:cb:80:15:ef:51:77:4f:ac:da:b7: c4:47:70:f9:fe:88:38:e8:a6:df:7a:4e:2b:c8:fc:97:ea:ef: e9:bf:fd:3a:e6:e3:45:68:74:9f:dc:16:91:6a:89:0e:b7:54: 71:ca:14:95:6f:6d:5d:55:a5:1f:7e:c7:7c:d3:1b:a2:cd:8f: 5a:ea:f3:bf:9f:f0:b9:0d:4c:26:8a:38:b0:ca:c6:63:f6:30: be:da:32:ec:7b:e0:42:75:db:d8:29:7c:3a:45:9b:cd:98:c5: 73:0f:c8:8b:4c:12:d9:9a:33:4c:56:27:f4:d5:00:2d:df:b2: f5:45:fc:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjUwODExMDI1NDIwWhcNMjUwODE4MDI1NDIwWjAYMRYwFAYD VQQDEw02ODk5NWI1Yy0xN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1VORaRqTN3yrmwzpuZvsXMX9WZJkSAIE1jTFIJ0JA0cugMpTpZ2msFBf9/s n8+eIv3DOt1B+eTCQW5kzQxuALi2ii+mNbZAFYPuKnUnqriR9ofpCNB61aux+QnT kMJ9GKx4oPD0LU5uhoLbwL8YwzrlCB6eckVfOvHVMIUMLGQgAenwwFO0AzkapFVv UN+HE02ax9BcXuSoRW8F1lrVSkz6ovrY1ZMO8kHLw8jcnbx0RH/usKZLvz1QKzw/ 7f9l4NKOGBSf4IJ6M8OszGac7n7IlFBmK3kPZphR5GDIq0kbkJIyTbPk/A/3AD5p Y3LV4nizPNpYpLPX3W1DUo/K9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzw7YK+ p4/SasSFTf6RMHj+TCvEMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxQporTgyjhVgiCFg8fzctsR5zKTeJsH/g7jjviqPPbV9XNj/9Pzby ZLInxj/Cf5oJ94UjByeUbCmGif5p+JiavC2jOZr926IIyIPBxo1rRObird2yvjrl 2TfaP0eRB6Z4Qv+RlJfEfeWHGzQ7x8k9VEJcCBkKOJUAxiXrojicZplkDjBUgcuA Fe9Rd0+s2rfER3D5/og46Kbfek4ryPyX6u/pv/065uNFaHSf3BaRaokOt1RxyhSV b21dVaUffsd80xuizY9a6vO/n/C5DUwmijiwysZj9jC+2jLse+BCddvYKXw6RZvN mMVzD8iLTBLZmjNMVif01QAt37L1Rfze -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:42 2025 by rpki-client